Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/F-pxAQE_6RBwPkihW-r1vDtglOc.roa
File: F-pxAQE_6RBwPkihW-r1vDtglOc.roa (raw, json)
Hash identifier: KmXxQvYZLI/RcQeF9tuJu9LIfjQ7m5H843IFnqholK8=
Subject key identifier: 17:EA:71:01:01:3F:E9:10:70:3E:48:A1:5B:EA:F5:BC:3B:60:94:E7
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 019782741F7D29D83BA3F0FB7A37B4604CA3
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/F-pxAQE_6RBwPkihW-r1vDtglOc.roa
Signing time: Wed 18 Jun 2025 09:52:17 +0000
ROA not before: Wed 18 Jun 2025 09:52:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 5.10.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Jun 2025 17:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:74:1f:7d:29:d8:3b:a3:f0:fb:7a:37:b4:60:4c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Jun 18 09:52:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17ea7101013fe910703e48a15beaf5bc3b6094e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:07:61:2a:26:c6:51:e1:ad:22:1c:cf:29:
bf:5c:d6:93:88:61:e3:bb:37:7d:ab:26:98:be:af:
fc:f4:07:9f:ec:3e:6b:04:7b:4c:a6:af:f5:a7:71:
62:31:95:b7:d2:11:23:d7:55:74:80:c6:fb:10:68:
91:92:fb:d5:89:2e:b5:0e:63:18:ec:33:9a:e5:4b:
e0:cd:8e:94:39:5b:6c:e3:a0:54:19:e9:d0:c6:16:
c8:81:b2:2a:1e:57:9d:09:92:74:78:74:89:09:e6:
b4:b6:c8:e9:f5:20:c2:79:f2:01:c7:a4:6f:4b:09:
35:9c:fe:d8:30:d7:70:49:31:1e:de:cf:b6:01:8d:
a2:d7:33:ea:4e:7f:09:dc:b0:4a:2c:3d:06:8f:6b:
1a:bf:a9:fb:08:ae:c2:6a:e8:8f:f6:85:54:83:2f:
ad:aa:c4:55:de:4b:55:25:b7:7d:87:c3:62:8e:2c:
d5:c2:6d:97:6b:24:03:be:df:f5:44:ca:e0:d8:0f:
2b:82:b2:d5:39:28:75:86:e6:d1:c8:b5:5e:86:66:
64:84:22:b8:0c:91:bc:b2:6d:c0:1c:b9:b6:7d:3c:
3a:af:57:b6:a0:72:26:dc:70:a1:46:59:90:16:8e:
ca:a7:c7:da:15:17:53:7f:f0:96:94:f2:48:0c:54:
91:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EA:71:01:01:3F:E9:10:70:3E:48:A1:5B:EA:F5:BC:3B:60:94:E7
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/F-pxAQE_6RBwPkihW-r1vDtglOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.222.0/24
Signature Algorithm: sha256WithRSAEncryption
64:4c:ee:72:e2:aa:6b:26:b5:43:ca:64:9c:6d:14:01:dd:33:
66:17:0c:91:6d:70:e0:f9:fe:e4:45:05:df:7d:52:04:19:44:
89:16:db:70:cd:37:c0:ed:20:19:b3:3e:c7:8e:6d:8f:3b:e6:
42:91:a2:26:57:9f:5e:86:99:cc:c0:a6:6a:7b:86:3e:93:b8:
3f:72:35:fc:71:b2:89:e2:30:3e:f6:af:6b:58:7a:be:01:ef:
72:f8:4c:a8:ef:16:b3:ef:76:9c:03:42:cd:52:8c:9d:a2:89:
e8:c4:71:70:ad:ce:a0:e9:ba:61:4b:8f:da:d0:c8:b3:2e:57:
db:fc:a1:20:6b:d6:5f:00:8f:c0:db:c1:be:c6:e5:9f:f4:30:
bc:e0:14:bf:a0:3f:48:e1:bf:3e:37:56:05:c2:21:4c:3f:9d:
93:51:6f:4b:69:0a:68:9c:01:51:61:de:f2:04:13:b5:f7:94:
d5:10:2d:6b:62:21:b3:20:04:eb:e0:4e:3d:ab:af:c6:09:27:
07:4c:b5:27:54:77:ee:98:08:25:0e:b8:70:e6:cd:db:e9:cc:
ae:ba:3d:1e:54:ab:14:5b:f8:5c:41:47:2b:a4:0d:fb:64:7a:
f7:60:34:4b:85:1d:f2:cc:57:73:f3:a5:ae:e7:a5:78:85:3f:
e3:6e:23:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:08:40 2025 by rpki-client